ipa-stack-ecr

Deploy an Amazon ECR repository with namespace and environment scoping.

1|1|Updated Apr 23, 2026
One-click install
npx skills add https://github.com/aws-samples/sample-innovation-patterns --skill ipa-stack-ecr
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ipa-stack-ecr
Source: https://github.com/aws-samples/sample-innovation-patterns/tree/main/.claude/skills/ipa-stack-ecr
Command: npx skills add https://github.com/aws-samples/sample-innovation-patterns --skill ipa-stack-ecr

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It solves the problem of provisioning a correctly named, secure ECR repository so you can store and deploy container images as part of a serverless AWS application.

Core Features & Use Cases

  • Provision an ECR repository: Creates the {APP_NAMESPACE}-{APP_ENV}-ecr repository used for image storage (e.g., for Lambda container images).
  • Expose downstream outputs: Publishes repository URI and ARN so other skills/stacks can reference the repository for building and deploying images.
  • Encode security posture: Enforces encryption at rest, private-by-default access, and safer deletion behavior aligned to POC needs.

Use case example: You are building a queue worker or API backend as a Lambda container image and need an ECR repository to push and later pull the image during deployment.

Quick Start

Ask the AI to deploy the ECR prerequisite by running the ipa-stack-ecr skill for your chosen Namespace and Environment.

Frequently Asked Questions about ipa-stack-ecr

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I provision an AWS ECR repository for Lambda container images?

To provision an AWS ECR repository for Lambda container images, this Skill deploys a CloudFormation template that creates a namespace and environment scoped repository. It outputs the repository URI and ARN for downstream build and deployment workflows.

What's the best way to enforce encryption and private access on an ECR repository?

Enforcing encryption and private access on an ECR repository is handled automatically during provisioning. The deployment encodes a security posture enforcing encryption at rest and private-by-default access controls aligned to POC requirements.

Do I need specific IAM permissions to deploy an ECR repository using CloudFormation?

Yes, deploying this ECR repository requires ECR CRUD permissions scoped to the repository resource ARN. You also need ecr:GetAuthorizationToken permissions on all resources to successfully provision the stack.

Can I use this ECR repository deployment for serverless application stacks?

Yes, you can use this ECR repository deployment for serverless application stacks. It specifically publishes repository URI and ARN outputs so downstream Lambda container stacks can build and pull images for deployment.

Why does my Lambda container deployment require a separate ECR repository?

Your Lambda container deployment requires a separate ECR repository to store and manage container images. This Skill provisions a correctly named repository so you can push images and pull them during serverless deployment.

What outputs does the ipa-stack-ecr CloudFormation template expose?

The ipa-stack-ecr CloudFormation template exposes the repository URI and ARN as outputs. These outputs allow other skills and stacks to reference the ECR repository for building and deploying container images.